Question
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
The domain contains the users shown in the following table.
The domain has the Group Policy Objects (GPOs) shown in the following table.
The GPOs are configured as shown in the following table.
For each of the following statements, select Yes if the statement is true, Otherwise, select No.
NOTE: Each correct selection is worth one point.
| Name | Located in |
| --- | --- |
| User1 | Contoso.com |
| User2 | Contoso.com/Users |
| User3 | Contoso.com/OU1 |
| Name | Linked to |
| --- | --- |
| Default Domain Policy | Contoso.com |
| Default Domain Controllers Policy | Domain Controllers |
| GPO1 | OU1 |
| GPO | Minimum password length |
| --- | --- |
| Default Domain Policy | 8 |
| Default Domain Controllers Policy | 12 |
| GPO1 | 10 |
Explanation
Statement 1 (Yes): Password policy for domain user accounts comes only from a GPO linked at the domain level. The Default Domain Policy, linked to contoso.com, sets a minimum password length of 8, so User1 must use at least eight characters.
Statement 2 (No): The 12-character minimum is set in the Default Domain Controllers Policy, which is linked to the Domain Controllers OU. Account Policies in a GPO linked below the domain level affect only local accounts on the computers in that OU, not domain accounts. User2 is in the Users container and is still subject to the domain-level minimum of 8 characters.
Statement 3 (No): GPO1 is linked to OU1 and sets a minimum of 10 characters, but because it is linked to an OU it applies only to local accounts on computers in OU1. It does not change the password requirements of the domain account User3, which remain the Default Domain Policy minimum of 8 characters. A different minimum for specific domain users requires a fine-grained password policy (PSO) applied to users or global groups, not an OU-linked GPO.
